GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-set-status, flux-source-watcher-fips, juicefs, act, gitlab-operator, prometheus-elasticsearch-exporter, kubernetes-csi-node-driver-registrar-fips, localstack, kind, cilium-envoy, amazon-ecs-agent, weaviate, prometheus-mongodb-exporter, bom, external-dns,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-set-status, flux-source-watcher-fips, juicefs, act, gitlab-operator, prometheus-elasticsearch-exporter, kubernetes-csi-node-driver-registrar-fips, localstack, kind, cilium-envoy, amazon-ecs-agent, weaviate, prometheus-mongodb-exporter, bom, external-dns,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, vault-k8s-fips, authservice-fips, cilium-certgen, crossplane-function-go-templating-fips, flux-source-watcher-fips, cert-manager-istio-csr-fips, influx, juicefs,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, vault-k8s-fips, authservice-fips, cilium-certgen, cluster-api-aws-controller, crossplane-function-go-templating-fips, terraform-provider-google-fips, influx, verticadb-operator, deck,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, authservice-fips, cluster-api-aws-controller, crossplane-function-go-templating-fips, terraform-provider-google-fips, verticadb-operator, deck, gitlab-operator, kserve-rest-proxy, prometheus-elasticsearch-exporter,...

GHSA-WM7X-WW72-R77Q Information Disclosure in Amazon ECS Container Agent

Summary Amazon Elastic Container Service Amazon ECS is a fully managed container orchestration service that enables customers to deploy, manage, and scale containerized applications. Amazon ECS container agent provides an introspection API that provides information about the overall state of the...

CVE-2025-9039 Information Disclosure in Amazon ECS Container Agent

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...

CVE-2025-9039 Information Disclosure in Amazon ECS Container Agent

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...

PT-2025-33310

Name of the Vulnerable Software and Affected Versions: Amazon ECS agent versions 0.0.3 through 1.97.0 Description: An issue was identified in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the sa...

Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft

Cybersecurity researchers have demonstrated an "end-to-end privilege escalation chain" in Amazon Elastic Container Service ECS that could be exploited by an attacker to conduct lateral movement, access sensitive data, and seize control of the cloud environment. The attack technique has been...

Elevating Security: Qualys Unveils First Solution for Scanning AWS Bottlerocket in Amazon EKS and Amazon ECS

With this new offering, Qualys establishes itself as the first and only vendor solution with the unique ability to scan AWS Bottlerocket instances directly using the Qualys Cloud Agent and TotalCloud Agent-less Snapshot-Based Scan. This innovative capability empowers organizations to...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ecs-init (SUSE-SU-2023:3522-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3522-1 advisory. - rebuild the package with the go 1.21 security release bsc1212475. Tenable has extracted the preceding description block...

SUSE-SU-2023:3522-1 Security update for amazon-ecs-init

This update of amazon-ecs-init fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

PT-2023-36254 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: amazon-ecs-init affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The update of amazon-ecs-init is intended to address this issue by rebuilding the package wi...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ecs-init (SUSE-SU-2023:2762-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2762-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block...

SUSE-SU-2023:2762-1 Security update for amazon-ecs-init

This update of amazon-ecs-init fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...

PT-2023-36216 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: amazon-ecs-init affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.20. The update of amazon-ecs-init is intended to address this issue by rebuilding the package wi...

Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins if any of the following plugins are installed: - Amazon...

Amazon ECS Exec Now Works with Containers in AWS Fargate

Building in containers offers amazing benefits for development teams – speed, agility, flexibility, scalability, etc...

Securing Containers at Scale: Amazon EKS, Amazon ECS and Deep Security Smart Check

Containers present a new opportunity for teams. An opportunity to deploy faster, more consistently, and with a simplicity rarely seen. But in order to make that happen a lot of infrastructure needs to be setup ahead of time. A cluster of hosts for the container runtime, an orchestration layer,...